Automim (984249bd-6421-4133-bd2a-25f330b4b441)
Researchers describe Automim as a "collection of .cmd, .vbs and .bat files that automate the execution" of the Mimikatz and LaZagne credential harvesting tools.[CrowdStrike Endpoint Security Testing Oct 2021]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Automim (984249bd-6421-4133-bd2a-25f330b4b441) | Tidal Software | Phobos Ransomware Actors (f138c814-48c0-4638-a4d6-edc48e7ac23a) | Tidal Groups | 1 |